Three supply chain attacks hit npm, PyPI, and Docker Hub between April 21–23, 2026. All three targeted secrets: API keys, cloud credentials, SSH keys, and tokens from developer environments and CI/CD ...
Modern apps make building easier than ever, but without strong security practices, one small mistake can expose your entire ...
Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...
Security researchers have discovered 10 new indirect prompt injection (IPI) payloads targeting AI agents with malicious ...
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...
Bitwarden CLI 2026.4.0 was compromised in a supply chain attack that targets crypto wallet keys, SSH keys, and CI/CD secrets.
The April 2026 Vercel security incident continues to extend past initial claims. The incident, which was said to involve what ...
The Chief Technology Officer (CTO) of Afridext Integrated Services Inc (Respectmart), Enitan A. Awosanya, who joined the ...
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...
Web Application Breaches Involve Stolen Credentials. 2.3 Million Bank Logins Are for Sale on the Dark Web Right Now. And Your ...
A relatively new ransomware family is using a novel approach to hype the strength of the encryption used to scramble ...